nixos/archisteamfarm: add mincore to SystemCallFilter

Signed-off-by: Ludovico Piero <lewdovico@gnuweeb.org>
2024-12-07 03:31:21 +09:00
parent 2a6b716fb4
commit 4b5e02043f
1 changed files with 1 additions and 1 deletions
@@ -221,7 +221,7 @@ in
            RestrictSUIDSGID = true;
            SecureBits = "noroot-locked";
            SystemCallArchitectures = "native";
-            SystemCallFilter = [ "@system-service" "~@privileged" ];
+            SystemCallFilter = [ "@system-service" "~@privileged" "mincore" ];
            UMask = "0077";
          }
        ];